Wow, what a sweet idea Matthew! Applying rules of English (like Q is always followed by U) to look for gibberish. :)
Yea, so long as BODY searches attachments, any small code will sooner or later show up in an attachment. I've even had problems trying hard tests for complete words where an L was replaced with an I and it showed up in attachment PDF code. Dan On Wednesday, September 10, 2003 13:36, Matthew Bramble <[EMAIL PROTECTED]> wrote: >Dan Patnode wrote: > >>Good point, >> >>The goal then should be to differentiate numbers used as codes >from numbers used to confuse. The former tend to be contiguous >while the later (in my experience), tend to be mixed in with >letters. Perhaps if the test counted numbers with letters on both sides? >> >>Dan >> > >If you are looking for gibberish, look to the subject line and not the >sender. I actually have a decent test for this in the subject line >(don't use it in the body). The only false positives would come from >very strange acronyms and auto-generated code such as tracking/receipt >numbers. This scores higher the more gibberish you catch. It's been >safe so far for me. > > >GIBBERISHSUB filter C:\IMail\Declude\GibberishSub.txt >x 1 0 > > >SUBJECT 2 CONTAINS qb >SUBJECT 2 CONTAINS qc >SUBJECT 2 CONTAINS qd >SUBJECT 2 CONTAINS qe >SUBJECT 2 CONTAINS qf >SUBJECT 2 CONTAINS qg >SUBJECT 2 CONTAINS qh >SUBJECT 2 CONTAINS qi >SUBJECT 2 CONTAINS qj >SUBJECT 2 CONTAINS qk >SUBJECT 2 CONTAINS qm >SUBJECT 2 CONTAINS qn >SUBJECT 2 CONTAINS qo >SUBJECT 2 CONTAINS qp >SUBJECT 2 CONTAINS qr >SUBJECT 2 CONTAINS qs >SUBJECT 2 CONTAINS qt >SUBJECT 2 CONTAINS qv >SUBJECT 2 CONTAINS qx >SUBJECT 2 CONTAINS qy >SUBJECT 2 CONTAINS qz > >SUBJECT 2 CONTAINS vq >SUBJECT 2 CONTAINS wq >SUBJECT 2 CONTAINS tq >SUBJECT 2 CONTAINS jq > >SUBJECT 2 CONTAINS xd >SUBJECT 2 CONTAINS xj >SUBJECT 2 CONTAINS xk >SUBJECT 2 CONTAINS xr >SUBJECT 2 CONTAINS xz > >SUBJECT 2 CONTAINS zb >SUBJECT 2 CONTAINS zc >SUBJECT 2 CONTAINS zf >SUBJECT 2 CONTAINS zj >SUBJECT 2 CONTAINS zk >SUBJECT 2 CONTAINS zl >SUBJECT 2 CONTAINS zm >SUBJECT 2 CONTAINS zx > > > >--- >[This E-mail was scanned for viruses by Declude Virus >(http://www.declude.com)] > >--- >This E-mail came from the Declude.JunkMail mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.JunkMail". The archives can be found >at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
